Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a666266333a3a2f34382d3438203d3e20313937393933.roa
File:                     326131333a646638303a666266333a3a2f34382d3438203d3e20313937393933.roa (raw, json)
Hash identifier:          bh3csaNIxx/wT8X0Q2Il60MEC9QdBDUc94BHUn4Hoi0=
Subject key identifier:   FD:B1:8E:80:40:B5:5E:55:25:43:B7:AB:0D:45:0F:C7:CC:11:52:51
Certificate issuer:       /CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
Certificate serial:       35DAAD2CAF25409ECEDC7418BF2553B648DE3D07
Authority key identifier: D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a666266333a3a2f34382d3438203d3e20313937393933.roa
Signing time:             Tue 19 Sep 2023 12:17:41 +0000
ROA not before:           Tue 19 Sep 2023 12:12:41 +0000
ROA not after:            Tue 17 Sep 2024 12:17:41 +0000
asID:                     197993
IP address blocks:        2a13:df80:fbf3::/48 maxlen: 48

Validation:               Failed, unable to get certificate CRL

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:da:ad:2c:af:25:40:9e:ce:dc:74:18:bf:25:53:b6:48:de:3d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5c3d5e70fc9ad10ba90d45dc66454e9e3a146a8
        Validity
            Not Before: Sep 19 12:12:41 2023 GMT
            Not After : Sep 17 12:17:41 2024 GMT
        Subject: CN=FDB18E8040B55E552543B7AB0D450FC7CC115251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ab:45:0c:02:4a:47:99:ce:97:e2:0b:2d:81:
                    b5:8d:18:7b:c1:f3:a6:f7:60:63:f1:47:3c:50:7c:
                    c8:fb:fd:18:cb:51:49:4f:f9:c5:22:db:61:d4:ce:
                    c6:fe:22:13:fa:76:47:65:b7:af:d6:04:e2:93:23:
                    db:d2:b8:f8:ba:d3:48:24:d7:f8:95:78:ef:b3:26:
                    71:2a:70:04:e1:82:eb:a9:0e:0a:af:3f:f5:93:cb:
                    e2:6b:4b:d0:b8:ac:89:fe:8f:a5:fe:e6:4f:6f:1a:
                    e8:84:7e:1b:e4:49:da:22:3f:8e:b6:75:0b:f6:36:
                    04:db:90:69:d0:f0:eb:da:ef:35:36:83:09:b0:ba:
                    cb:f7:24:ae:c8:30:64:c4:2e:ff:a7:75:f6:27:37:
                    77:38:0c:f7:0d:64:e6:00:49:df:c9:f8:25:0c:79:
                    86:b6:ed:0d:bc:a7:36:e8:85:4e:d2:fb:1f:10:12:
                    fb:47:26:f8:62:68:57:7b:3c:42:e8:25:1c:f5:b9:
                    08:15:dc:46:e6:86:ab:de:2f:b3:3a:fc:28:bf:97:
                    31:89:73:68:91:71:9a:2b:e0:73:ba:b4:5d:ae:41:
                    e6:00:1b:ad:6b:03:a7:4f:32:43:76:0f:8b:26:2c:
                    c0:05:44:a1:f3:96:c2:96:b4:d3:1b:5a:fd:70:22:
                    4a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B1:8E:80:40:B5:5E:55:25:43:B7:AB:0D:45:0F:C7:CC:11:52:51
            X509v3 Authority Key Identifier:
                keyid:D5:C3:D5:E7:0F:C9:AD:10:BA:90:D4:5D:C6:64:54:E9:E3:A1:46:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/D5C3D5E70FC9AD10BA90D45DC66454E9E3A146A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cPV5w_JrRC6kNRdxmRU6eOhRqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/0/326131333a646638303a666266333a3a2f34382d3438203d3e20313937393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a13:df80:fbf3::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:4d:d4:24:d7:3a:6d:3a:ab:32:bd:d4:df:84:51:3c:81:19:
         78:14:1a:f7:ea:ab:85:c1:35:5b:af:3f:b0:95:bc:77:b1:cb:
         a4:d8:aa:d4:0e:76:f8:81:8b:2b:ce:8c:91:c6:01:21:6c:f8:
         d1:2a:d1:bb:e1:cb:fd:f2:84:b5:64:54:aa:74:15:fb:89:50:
         1d:af:a6:2b:5d:ed:6a:f4:f8:29:fb:33:31:d4:c1:04:38:7f:
         18:50:5a:3c:3c:5f:31:7d:99:23:b9:3d:1c:3d:67:67:c7:9a:
         a7:18:65:fb:1c:c9:de:32:93:22:55:77:2d:2a:db:ba:a0:83:
         91:00:a9:50:b3:7b:81:0c:08:a9:a8:7c:b5:0f:48:18:1d:68:
         eb:76:e1:49:cd:ad:00:60:ed:f2:4f:4d:ea:e8:0a:87:10:31:
         61:51:5c:24:12:7d:87:4a:f7:27:1c:2e:bf:0b:ab:aa:26:0b:
         ed:fd:30:a9:17:7e:7f:0d:e9:9e:6c:7e:bd:73:2c:0c:66:71:
         c8:d9:74:19:ae:1b:25:b5:6f:98:18:58:69:69:58:d1:da:cf:
         bd:c7:44:46:09:70:8c:50:b8:5a:79:fb:79:df:d6:34:23:12:
         5b:07:bf:24:39:0c:58:e1:4d:ed:a6:bf:a3:f8:b6:77:88:f9:
         55:bf:ca:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----